Bamboo Server + Identity Federation for AWS (Bamboo) + Instance Role

[Jose Luis Dorado]

Hi there,

We are trying to set up the plugin without using any kind of AWS Credential, our Bamboo Server is deployed inside EC2 with an instance role already assigned to assume other roles, but I haven't found any way to delegate the authentication to the role.

Could you help me?

[Steffen Opel _Utoolity_]

Hi Jose,

Sorry for the late reply, yours has been the first question on this tag in the community, and we apparently messed up our respective monitoring due to being on the road for Summit 2019 - we need to look into what caused that, my apologies!

I'll update my answer tomorrow with more details, but the ultra short version is:

We do already support EC2 instance roles for tasks running on agents with an EC2 instance profile, please refer to IAM Role for EC2 (Agent) for details.

However, we do not yet support using an EC2 instance role as the credentials source for an AWS Connector, thereby blocking the use of the AWS Management Console login menu. This is a long standing request of mine that hasn't seen any traction so far, thus always slipped - please watch, vote, and ideally comment with your use case on the following issue, we would be more than happy to finally address:

• As an administrator, I want to reuse AWS credentials provided by an IAM role so that I do not need to configure an account (UAA-49)

I hope this helps right now, I'll try to add more details soon.

Cheers,
Steffen